PEER 1, Dedicated Colocation Hosting Provider, Deploys Juniper M-Series Routers

Sunnyvale, California - (The Hosting News) - March 24, 2008 - Internet infrastructure and hosting solutions provider, PEER 1 Network Enterprises, Inc., has initiated the M-series Multiservice Edge Routers of Juniper, in all of its major points of presence.

Ted Smith, Vice President of Operations at PEER 1 noted, ''Juniper's architecture and proven JUNOS software provides our organization with the high-performance and reliability we require to address the ever-expanding requirements of our customers. With the new global network based on Juniper's M-series, our customers will experience increased application speed, performance and security, allowing them the flexibility and scalability they need to grow their businesses and online presence.''

The new Juniper infrastructure will also allow PEER 1 to seamlessly support existing SONET services alongside its new 10 gigabit Ethernet services, while offering the consistent levels of performance, security and reliability. Coupled with advanced QoS capabilities and excellent mitigation for DDoS attacks and threats, the M-series will enable PEER 1 to both scale and secure new application services for its business clients globally.

Built upon the Juniper Networks M120 Multiservice Edge Routers, PEER 1's next-generation backbone network will enable them to quickly and cost-effectively introduce a range of new ultra high-speed Ethernet and SONET-based business-class services.

Tim Lambie, Vice President, Americas International, Juniper Networks commented, ''PEER 1's growing success offering a flexible range of hosted IT solutions to business clients demands a fast, secure and reliable network. The M120 offers multi-gigabit capacity, with advanced security features, giving PEER 1 the ability to offer award-winning services to their customers.''

Juniper Networks M-series Multiservice Edge Routing portfolio uniquely combines best-in-class IP/MPLS capabilities with unmatched reliability, stability, security, and service richness. The M120 Multiservice Edge Router is the newest addition to the Juniper Networks M-series product family. The M120 delivers support for 128 Gigabit Ethernet subscriber ports, with 10 Gigabit Ethernet or OC-192 uplink capability in an affordable, compact form factor. This approach allows PEER 1 Networks to deliver high-performance connectivity services with best-in-class application delivery and true service differentiation.

Juniper Networks, Inc. is a high-performance networking firm, offering a high-performance network infrastructure designed to create a responsive and trusted environment for accelerating the deployment of services and applications over a single network.

PEER 1online IT infrastructure provider, serves over 9,000 customers, with scalable managed hosting and co-location solutions. Since 1999, PEER 1 has grown to include data centers and network points of presence in 17 major cities across North America and Europe. Serving a variety of companies, PEER 1 offers solutions that grow through every stage of web commerce, regardless of company size. The company's headquarters are in Vancouver, Canada and the stock is traded on the TSX Venture exchange under the symbol PIX.

To learn more about Juniper, please visit: www.juniper.net.

For more information about PEER 1, please visit: www.peer1.com.

$300 for the solution - fwmark, iptables

I am using linux kernel 2.4.35

I need to ask you for some expertise regarding iptables, fwmark, and ip rule.

I am currently redirecting all traffic through the VPN. This works great. However, I don't want http traffic to go through the VPN I want all other traffic to go through but not http.

So i did alot of research and I found that I would be able to create another routing table besides main. And then route any specific traffic through that route.

First I create another table like this:
#ip route show table main | grep -Ev tun | grep -Ev ^default | while read ROUTE ; do
ip route add table 7 $ROUTE
done
#ip route add table 7 default via 192.168.66.1
*** 192.168.66.1 is my IP recieved from my ISP's modem ***

I know table 7 works perfect because if I change the default ip rule to direct all traffic to table 7 I am no longer using the VPN for all traffic. This is how I did the test:
DEFAULT IP RULE (ALL TRAFFIC GOES THROUGH VPN AT FIRST):
# ip rule
0: from all lookup local
32766: from all lookup main
32767: from all lookup default

CHANGED IP RULE (ALL TRAFFIC GOES THROUGH ISP AFTER THESE COMMANDS):
# ip rule add from 0/0 table 7 pref 100
# ip rule
0: from all lookup local
100: from all lookup 7
32766: from all lookup main
32767: from all lookup default

But this is not what I want I only want to web traffic to go through the ISP and everything else to go through the VPN. Therefore http should go through table 7 and all other traffic should go through table main. So I did some research and found I need to mark the packets using IP tables. And then i have to use fwmark to inside ip rule to move these packets to table 7. So this is what I did:
FIRST I WANT TO REMOVE THE IP RULE TABLE 7 (ALL TRAFFIC NOW IS GOING BACK THROUGH THE VPN AFTER THESE COMMANDS):
# ip rule del from 0/0 table 7 pref 100
# ip rule
0: from all lookup local
32766: from all lookup main
32767: from all lookup default

THEN I WANT TO ADD A FWMARK TO THE IP RULE (ALL TRAFFIC STILL GOES THROUGH VPN AFTER THESE COMMANDS):
# ip rule add fwmark 7 table 7 pref 100
# ip rule
0: from all lookup local
100: from all fwmark 0x7 lookup 7
32766: from all lookup main
32767: from all lookup default

The reason why traffic is still going through the VPN is because there are no marked packets with 7.

THEN I MARK ALL HTTP PACKETS WITH 7:
#iptables -t mangle -I PREROUTING -m layer7 --l7proto http -j MARK --set-mark 7

Now as soon as I issue this command http traffic doesn't work at all. All other traffic works perfect, if I try to access a server using ssh it works, but if i try to access the web nothing happens. This means that the command to mark http packets is working. But for some reason fwmark doesn't effectively use table 7. We know that table 7 is working perfect because we tested it by sending all traffic to it. So the error or limitation is fwmark. Why can't fwmark correctly use table 7? I have read that I may need to add an SNAT or DNAT rule. I also read that maybe the kernel has to include this fwmark in order for it to work. I am stuck. This is very important.

P.S. AS SOON AS I REMOVE THE IPTABLES MARK 7 EVERYTHING IS GOING THROUGH THE VPN AGAIN AFTER THIS COMMAND.
#iptables -t mangle -D PREROUTING -m layer7 --l7proto http -j MARK --set-mark 7

1.) Table 7 works - this is not the issue.
2.) marking http packets works - this is not the issue
3.) ip rule add fwmark is not working for some reason.
a.) it could be that the kernel cannot handle this. Please check it. But this does not seem likely since it allowed the command.
b.) it could be that when packets are going out they are going out with the wrong source IP, which is why I may need to use SNAT and DNAT iptables rules.
c.) I could be missing another step that is required when using fwmark inside the ip rule.

P.P.S Yes I have also tried marked all tcp port 80 without using the layer7 filter and I still get the exact same result. PLEASE HELP!!!

Thanks,
Vince

LXer: Waiting on the HP Linux desktop

Published at LXer:

I would have liked to have been able to tell you in great detail exactly what desktops and laptops will soon be coming from Hewlett-Packard equipped with SUSE Linux Enterprise Desktop 10. I'd like to tell you, but HP is still holding its Linux desktop cards close to its chest and not revealing any details. This is very annoying.

Read More...

install is hard with f-bsd

elslamo alikom
when i installed freebsd7 and selected the ports that i need to install
during installation it asked to instert cd2 ,then asked about cd3 then cd2 then cd1 then................................
it is very bad to do something like that
i wish if there is a solution for that
or there is a dvd that makes installation more easier